Get all your news in one place.
100's of premium titles.
One app.
Start reading
TechRadar
TechRadar
Sead Fadilpašić

Worrying WhatsApp attack can steal messages and even accounts - here's how to stay safe from "poisoned" attack

Cyber crime and security vector concept showing a laptop, credit card and open padlock.
  • Malicious NPM package lotusbail hijacks WhatsApp accounts, stealing tokens, messages, and contacts
  • Attackers link their device via WhatsApp pairing, persisting even after package removal
  • Package had 56,000+ downloads before discovery; developers urged to verify sources carefully

Node Package Manager (NPM) registry users are being targeted with malware that takes over their WhatsApp accounts, steals messages, and contacts lists, experts have warned.

Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.